1// check that already-acked (retransmitted) packet is let through rather 2// than tagged as INVALID. 3 4`packetdrill/common.sh` 5 6// should set -P DROP but it disconnects VM w.o. extra netns 7+0 `$xtables -A INPUT -m conntrack --ctstate INVALID -j DROP` 8 9+0 socket(..., SOCK_STREAM, IPPROTO_TCP) = 3 10+0 setsockopt(3, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 11+0 bind(3, ..., ...) = 0 12+0 listen(3, 10) = 0 13 14+0 < S 0:0(0) win 32792 <mss 1000> 15+0 > S. 0:0(0) ack 1 <mss 1460> 16+.01 < . 1:1(0) ack 1 win 65535 17+0 accept(3, ..., ...) = 4 18 19+0.0001 < P. 1:1461(1460) ack 1 win 257 20+.0 > . 1:1(0) ack 1461 win 65535 21+0.0001 < P. 1461:2921(1460) ack 1 win 257 22+.0 > . 1:1(0) ack 2921 win 65535 23+0.0001 < P. 2921:4381(1460) ack 1 win 257 24+.0 > . 1:1(0) ack 4381 win 65535 25+0.0001 < P. 4381:5841(1460) ack 1 win 257 26+.0 > . 1:1(0) ack 5841 win 65535 27+0.0001 < P. 5841:7301(1460) ack 1 win 257 28+.0 > . 1:1(0) ack 7301 win 65535 29+0.0001 < P. 7301:8761(1460) ack 1 win 257 30+.0 > . 1:1(0) ack 8761 win 65535 31+0.0001 < P. 8761:10221(1460) ack 1 win 257 32+.0 > . 1:1(0) ack 10221 win 65535 33+0.0001 < P. 10221:11681(1460) ack 1 win 257 34+.0 > . 1:1(0) ack 11681 win 65535 35+0.0001 < P. 11681:13141(1460) ack 1 win 257 36+.0 > . 1:1(0) ack 13141 win 65535 37+0.0001 < P. 13141:14601(1460) ack 1 win 257 38+.0 > . 1:1(0) ack 14601 win 65535 39+0.0001 < P. 14601:16061(1460) ack 1 win 257 40+.0 > . 1:1(0) ack 16061 win 65535 41+0.0001 < P. 16061:17521(1460) ack 1 win 257 42+.0 > . 1:1(0) ack 17521 win 65535 43+0.0001 < P. 17521:18981(1460) ack 1 win 257 44+.0 > . 1:1(0) ack 18981 win 65535 45+0.0001 < P. 18981:20441(1460) ack 1 win 257 46+.0 > . 1:1(0) ack 20441 win 65535 47+0.0001 < P. 20441:21901(1460) ack 1 win 257 48+.0 > . 1:1(0) ack 21901 win 65535 49+0.0001 < P. 21901:23361(1460) ack 1 win 257 50+.0 > . 1:1(0) ack 23361 win 65535 51+0.0001 < P. 23361:24821(1460) ack 1 win 257 520.055 > . 1:1(0) ack 24821 win 65535 53+0.0001 < P. 24821:26281(1460) ack 1 win 257 54+.0 > . 1:1(0) ack 26281 win 65535 55+0.0001 < P. 26281:27741(1460) ack 1 win 257 56+.0 > . 1:1(0) ack 27741 win 65535 57+0.0001 < P. 27741:29201(1460) ack 1 win 257 58+.0 > . 1:1(0) ack 29201 win 65535 59+0.0001 < P. 29201:30661(1460) ack 1 win 257 60+.0 > . 1:1(0) ack 30661 win 65535 61+0.0001 < P. 30661:32121(1460) ack 1 win 257 62+.0 > . 1:1(0) ack 32121 win 65535 63+0.0001 < P. 32121:33581(1460) ack 1 win 257 64+.0 > . 1:1(0) ack 33581 win 65535 65+0.0001 < P. 33581:35041(1460) ack 1 win 257 66+.0 > . 1:1(0) ack 35041 win 65535 67+0.0001 < P. 35041:36501(1460) ack 1 win 257 68+.0 > . 1:1(0) ack 36501 win 65535 69+0.0001 < P. 36501:37961(1460) ack 1 win 257 70+.0 > . 1:1(0) ack 37961 win 65535 71+0.0001 < P. 37961:39421(1460) ack 1 win 257 72+.0 > . 1:1(0) ack 39421 win 65535 73+0.0001 < P. 39421:40881(1460) ack 1 win 257 74+.0 > . 1:1(0) ack 40881 win 65535 75+0.0001 < P. 40881:42341(1460) ack 1 win 257 76+.0 > . 1:1(0) ack 42341 win 65535 77+0.0001 < P. 42341:43801(1460) ack 1 win 257 78+.0 > . 1:1(0) ack 43801 win 65535 79+0.0001 < P. 43801:45261(1460) ack 1 win 257 80+.0 > . 1:1(0) ack 45261 win 65535 81+0.0001 < P. 45261:46721(1460) ack 1 win 257 82+.0 > . 1:1(0) ack 46721 win 65535 83+0.0001 < P. 46721:48181(1460) ack 1 win 257 84+.0 > . 1:1(0) ack 48181 win 65535 85+0.0001 < P. 48181:49641(1460) ack 1 win 257 86+.0 > . 1:1(0) ack 49641 win 65535 87+0.0001 < P. 49641:51101(1460) ack 1 win 257 88+.0 > . 1:1(0) ack 51101 win 65535 89+0.0001 < P. 51101:52561(1460) ack 1 win 257 90+.0 > . 1:1(0) ack 52561 win 65535 91+0.0001 < P. 52561:54021(1460) ack 1 win 257 92+.0 > . 1:1(0) ack 54021 win 65535 93+0.0001 < P. 54021:55481(1460) ack 1 win 257 94+.0 > . 1:1(0) ack 55481 win 65535 95+0.0001 < P. 55481:56941(1460) ack 1 win 257 96+.0 > . 1:1(0) ack 56941 win 65535 97+0.0001 < P. 56941:58401(1460) ack 1 win 257 98+.0 > . 1:1(0) ack 58401 win 65535 99+0.0001 < P. 58401:59861(1460) ack 1 win 257 100+.0 > . 1:1(0) ack 59861 win 65535 101+0.0001 < P. 59861:61321(1460) ack 1 win 257 102+.0 > . 1:1(0) ack 61321 win 65535 103+0.0001 < P. 61321:62781(1460) ack 1 win 257 104+.0 > . 1:1(0) ack 62781 win 65535 105+0.0001 < P. 62781:64241(1460) ack 1 win 257 106+.0 > . 1:1(0) ack 64241 win 65535 107+0.0001 < P. 64241:65701(1460) ack 1 win 257 108+.0 > . 1:1(0) ack 65701 win 65535 109+0.0001 < P. 65701:67161(1460) ack 1 win 257 110+.0 > . 1:1(0) ack 67161 win 65535 111 112// nf_ct_proto_6: SEQ is under the lower bound (already ACKed data retransmitted) IN=tun0 OUT= MAC= SRC=192.0.2.1 DST=192.168.24.72 LEN=1500 TOS=0x00 PREC=0x00 TTL=255 ID=0 PROTO=TCP SPT=34375 DPT=8080 SEQ=1 ACK=4162510439 WINDOW=257 RES=0x00 ACK PSH URGP=0 113+0.0001 < P. 1:1461(1460) ack 1 win 257 114 115// only sent if above packet isn't flagged as invalid 116+.0 > . 1:1(0) ack 67161 win 65535 117 118+0 `$xtables -D INPUT -m conntrack --ctstate INVALID -j DROP` 119